This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json) Hash identifier: oU1tQMlcYXyEokAOYOZweBIVnwzcx5xgTDABIU4/kao= Subject key identifier: C2:5B:F6:03:CE:00:50:53:9B:99:41:6A:8D:35:EA:D1:7E:CE:74:0B Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb Certificate serial: 019C439001D4F035D7C101EF67ACF44B9FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft Manifest number: 02B1 Signing time: Mon 09 Feb 2026 18:00:36 +0000 Manifest this update: Mon 09 Feb 2026 18:00:36 +0000 Manifest next update: Tue 10 Feb 2026 18:00:36 +0000 Files and hashes: 1: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: s8e4o4KYW3rH5t/mAHl9MgmDKF+lri38BFldH3MKxsQ=) 2: vSoBznDbkikChHtY3NKyw5nmxlM.roa (hash: rSKQo5evduX7uHTKdQHTDx+TSA/wtivZWu5lTBpqgRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:01:d4:f0:35:d7:c1:01:ef:67:ac:f4:4b:9f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb Validity Not Before: Feb 9 18:00:36 2026 GMT Not After : Feb 10 18:00:36 2026 GMT Subject: CN=c25bf603ce0050539b99416a8d35ead17ece740b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:fe:8f:ed:b2:59:24:d1:7f:7d:bd:df:1d: 9d:ac:bf:85:15:1a:bc:53:89:f3:4a:e2:bc:19:5a: 27:73:b5:d3:a3:e6:2e:a5:04:11:d4:f1:b5:b8:62: 1d:0b:99:7e:d8:df:ea:df:fe:5f:78:bd:19:cd:62: c7:1c:15:5c:c0:71:c6:5a:f6:05:d0:39:0b:99:b9: aa:b4:1c:42:85:ee:7a:1a:d0:8d:66:08:59:3e:67: 81:3f:b7:d5:ad:3e:77:53:ee:41:9f:82:e2:5a:f6: d8:3d:8c:f1:ef:de:d2:8a:09:9f:96:28:3b:10:62: 7f:a9:19:d9:87:ee:7f:3f:64:c1:0b:8d:a3:54:10: 76:5d:64:d5:fa:83:90:68:a6:f4:4a:f9:47:a1:d7: 5e:14:b3:2b:15:16:e8:70:99:af:e6:b9:8e:b4:a5: 9c:d4:89:65:b7:51:53:a8:25:2d:52:62:5e:58:77: 69:41:3e:b7:2f:31:9f:d8:10:35:8e:0c:94:c9:8c: 8f:78:a9:32:1e:99:56:b0:e4:5e:7b:b9:4d:bb:2a: 21:1b:79:ec:52:d0:36:7e:87:45:7e:e6:cc:a6:9f: 10:2e:77:12:83:13:c2:f8:fe:50:43:c1:1c:3a:6d: bb:f3:6a:fc:1f:d5:aa:23:7e:f8:ac:93:b1:d7:d8: 0d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5B:F6:03:CE:00:50:53:9B:99:41:6A:8D:35:EA:D1:7E:CE:74:0B X509v3 Authority Key Identifier: keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d9:72:b2:00:d2:49:96:32:3c:31:51:bc:35:94:7a:dc:18: 4d:6b:1f:26:7b:cd:51:ee:a1:5b:46:79:f2:52:db:5f:87:1d: 02:1f:b6:b0:52:36:4a:5d:04:3b:cd:85:df:88:de:8c:eb:e7: e6:f4:d5:d6:d3:c7:b6:26:9b:2d:48:21:60:2c:dd:7b:99:9c: 0b:b3:0c:b6:5b:e2:7c:68:99:50:25:a8:36:8e:5d:98:bd:2d: f2:1d:f1:17:99:69:37:0f:0e:ae:fb:f1:1a:ac:5c:bc:94:2b: 4b:bd:a8:3c:75:9c:77:bb:ec:02:9c:62:47:a8:13:ab:02:40: 65:70:be:d5:fd:11:34:20:93:34:47:1d:f9:e5:d2:ad:a6:a6: 10:51:50:30:c9:63:ef:c6:ef:53:06:b2:80:be:1c:e2:cf:6b: b6:07:b8:3d:ab:3c:4d:74:2b:80:37:1c:49:ee:d8:74:e6:74: b2:a6:a8:d5:aa:7b:9e:f0:b0:34:a2:3b:98:79:65:ce:64:ba: 9e:82:0b:a2:d0:8e:95:23:7a:02:10:0a:72:33:f9:1e:e9:46: fc:dc:05:2c:b7:b3:d5:a1:a4:d3:df:21:b3:d8:a3:59:ee:32: 11:46:ae:56:30:29:6c:c9:b2:27:f9:44:67:32:f4:1c:4b:d6: 64:05:2f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkAHU8DXXwQHvZ6z0S5/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODRlM2QyM2ZmNjBiODI5ZTE0NmViZGFiNGEwYWU2MWRl MGY0ZmIwHhcNMjYwMjA5MTgwMDM2WhcNMjYwMjEwMTgwMDM2WjAzMTEwLwYDVQQD EyhjMjViZjYwM2NlMDA1MDUzOWI5OTQxNmE4ZDM1ZWFkMTdlY2U3NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleb+j+2yWSTRf3293x2drL+FFRq8 U4nzSuK8GVonc7XTo+YupQQR1PG1uGIdC5l+2N/q3/5feL0ZzWLHHBVcwHHGWvYF 0DkLmbmqtBxChe56GtCNZghZPmeBP7fVrT53U+5Bn4LiWvbYPYzx797Sigmflig7 EGJ/qRnZh+5/P2TBC42jVBB2XWTV+oOQaKb0SvlHoddeFLMrFRbocJmv5rmOtKWc 1Illt1FTqCUtUmJeWHdpQT63LzGf2BA1jgyUyYyPeKkyHplWsORee7lNuyohG3ns UtA2fodFfubMpp8QLncSgxPC+P5QQ8EcOm2782r8H9WqI374rJOx19gNaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJb9gPOAFBTm5lBao016tF+znQLMB8GA1UdIwQY MBaAFK+E49I/9guCnhRuvatKCuYd4PT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQt ZTVkOGUzNzUwMDA5LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQtZTVkOGUzNzUwMDA5 LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNlysgDS SZYyPDFRvDWUetwYTWsfJnvNUe6hW0Z58lLbX4cdAh+2sFI2Sl0EO82F34jejOvn 5vTV1tPHtiabLUghYCzde5mcC7MMtlvifGiZUCWoNo5dmL0t8h3xF5lpNw8Orvvx GqxcvJQrS72oPHWcd7vsApxiR6gTqwJAZXC+1f0RNCCTNEcd+eXSraamEFFQMMlj 78bvUwaygL4c4s9rtge4Pas8TXQrgDccSe7YdOZ0sqao1ap7nvCwNKI7mHllzmS6 noILotCOlSN6AhAKcjP5HulG/NwFLLez1aGk098hs9ijWe4yEUauVjApbMmyJ/lE ZzL0HEvWZAUv3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:04 2026 by rpki-client